How many langflow-ai langflow-base CVEs are in CISA KEV?

Yes — 1 of langflow-ai langflow-base's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of langflow-ai langflow-base are affected?

8 distinct langflow-ai langflow-base versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in langflow-ai langflow-base CVEs?

langflow-ai langflow-base's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-269 (Improper Privilege Management), CWE-284 (Improper Access Control), CWE-862 (Missing Authorization).

How many critical langflow-ai langflow-base vulnerabilities are there?

langflow-ai langflow-base has 1 critical and 3 high-severity CVEs.

What is the average severity of langflow-ai langflow-base CVEs?

The average CVSS base score across langflow-ai langflow-base's scored CVEs is 8.5.

langflow-ai langflow-base Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: langflow-ai langflow-base vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

langflow-ai langflow-base Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

langflow-ai langflow-base has 5 published CVE records since 2025, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting langflow-ai langflow-base, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of langflow-ai langflow-base's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of langflow-ai langflow-base's CVEs is confirmed exploited in the wild.

Public exploits

3 of langflow-ai langflow-base's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every langflow-ai langflow-base version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.5.12 CVEs
< 0.3.01 CVE
< 0.7.11 CVE
< 0.9.11 CVE

Fixed in

0.5.12 CVEs
0.3.01 CVE
0.7.11 CVE
0.9.11 CVE

Find a version

5 CVEs

Sort

langflow-ai langflow API Endpoint endpoints.py create_upload_file unrestricted upload
CVE-2026-6596
Public exploit
Patch
CWE-284
Medium · CVSS 6.9
EPSS 0.3% (21th pct)2026-04-20
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
CVE-2026-34046
Patch
CWE-862
High · CVSS 8.7
EPSS 0.5% (39th pct)2026-03-27
Langflow Missing Authentication on Critical API Endpoints
CVE-2026-21445
Patch
CWE-306
High · CVSS 8.8
EPSS 33.7% (98th pct)2026-01-02
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation
CVE-2025-57760
Public exploit
Patch
CWE-269
High · CVSS 8.8
EPSS 0.5% (39th pct)2025-08-25
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVE-2025-3248
CISA KEV
Public exploit
Patch
CWE-306
Added to CISA KEV 2025-05-05
Critical · CVSS 9.3
EPSS 100.0% (100th pct)2025-04-07

Common weakness types

The CWE weakness categories most often found in langflow-ai langflow-base CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many langflow-ai langflow-base CVEs were published each year.

2025

2026

Other langflow-ai products

Browse vulnerabilities for other products by langflow-ai.

langflow107 CVEs

All langflow-ai vulnerabilities

Frequently asked questions

Common questions about langflow-ai langflow-base vulnerabilities.

How many CVEs does langflow-ai langflow-base have?: langflow-ai langflow-base has 5 published CVE records since 2025.
How many langflow-ai langflow-base CVEs are in CISA KEV?: Yes — 1 of langflow-ai langflow-base's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for langflow-ai langflow-base vulnerabilities?: Yes — 3 of langflow-ai langflow-base's CVEs have a known public exploit.
Which versions of langflow-ai langflow-base are affected?: 8 distinct langflow-ai langflow-base versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in langflow-ai langflow-base CVEs?: langflow-ai langflow-base's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-269 (Improper Privilege Management), CWE-284 (Improper Access Control), CWE-862 (Missing Authorization).
How many critical langflow-ai langflow-base vulnerabilities are there?: langflow-ai langflow-base has 1 critical and 3 high-severity CVEs.
What is the average severity of langflow-ai langflow-base CVEs?: The average CVSS base score across langflow-ai langflow-base's scored CVEs is 8.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track langflow-ai langflow-base vulnerabilities

Monitor new langflow-ai langflow-base vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing